CVE-2023-52850

MEDIUM Year: 2023
CVSS v3 Score
5.5
Medium
Weakness Type
CWE-476
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MM/N/P does not define the .reset op since reset of the VPU is done by genpd. Check whether the .reset op is defined before calling it to avoid NULL pointer dereference. Note that the Fixes tag is set to the commit which removed the reset op from i.MX8M Hantro G2 implementation, this is because before this commit all the implementations did define the .reset op.

Related Vulnerabilities

CVE-2001-1559

MEDIUM
CVSS:5.5(Medium)

The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial ...

CWE-4762001

CVE-2010-0206

MEDIUM
CVSS:5.5(Medium)

xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects.

CWE-4762010

CVE-2010-3079

MEDIUM
CVSS:5.5(Medium)

kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cau...

CWE-4762010

CVE-2011-3637

MEDIUM
CVSS:5.5(Medium)

The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.

CWE-4762011

CVE-2011-4081

MEDIUM
CVSS:5.5(Medium)

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a fail...

CWE-4762011

CVE-2011-4594

MEDIUM
CVSS:5.5(Medium)

The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an inco...

CWE-4762011